Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383339.roa
File:                     3230302e39302e3134342e302f32312d3234203d3e203237383339.roa (raw, json)
Hash identifier:          n3Flvw0IX+bAPnRQ7sJPswVcdJmg7JjZEsAYuKSmhvg=
Subject key identifier:   8C:58:61:03:7F:2A:7D:1A:D3:CF:D3:92:66:5E:D2:3E:4E:F9:C2:A0
Certificate issuer:       /CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Certificate serial:       3EF20EF0C832BFAC059A9DD66448EFF6352DCDDC
Authority key identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383339.roa
Signing time:             Tue 05 Mar 2024 17:57:28 +0000
ROA not before:           Tue 05 Mar 2024 17:52:28 +0000
ROA not after:            Tue 04 Mar 2025 17:57:28 +0000
asID:                     27839
IP address blocks:        200.90.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f2:0e:f0:c8:32:bf:ac:05:9a:9d:d6:64:48:ef:f6:35:2d:cd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
        Validity
            Not Before: Mar  5 17:52:28 2024 GMT
            Not After : Mar  4 17:57:28 2025 GMT
        Subject: CN=8C5861037F2A7D1AD3CFD392665ED23E4EF9C2A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dd:63:9c:fe:c5:45:a8:2a:bd:db:a5:64:d0:
                    f3:0e:1a:ca:f3:3d:0d:55:cb:52:85:1d:91:bd:0f:
                    ef:ee:c3:40:f6:2b:8c:71:a8:51:e9:a3:04:86:9c:
                    87:e0:e8:d4:27:cb:6a:b8:7b:7d:f8:e4:3f:68:75:
                    5d:be:0d:6f:0d:51:1f:e9:89:14:59:de:45:48:71:
                    6e:05:8e:aa:c8:6f:61:ec:f6:8b:80:7b:95:53:91:
                    43:ef:bf:9e:a2:29:06:1c:e9:30:35:36:55:85:10:
                    f4:f5:10:19:2b:b8:a1:60:e8:c6:6e:b1:0e:92:84:
                    4c:84:e4:82:09:3f:ea:0e:70:1d:ba:a8:8a:30:ce:
                    fd:8b:30:e7:76:1b:d3:ea:04:ea:cd:f9:ec:0b:28:
                    68:2b:4c:dd:02:b2:b0:85:fe:40:06:45:5b:78:ab:
                    17:b8:19:c4:f5:99:7d:a9:3d:fc:1a:5e:aa:73:a7:
                    a5:a6:f1:35:d1:53:62:05:1b:40:98:be:98:32:62:
                    71:bc:22:fe:b7:f7:53:55:3e:2f:ab:a2:b0:50:67:
                    7c:14:6c:7f:ec:c1:3d:d7:b2:85:45:d8:dd:12:4d:
                    d8:f8:43:67:9c:c1:6e:ff:58:74:e8:7a:f9:e5:03:
                    5f:2b:dd:a9:97:f6:74:c7:47:68:5f:27:49:d9:be:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:58:61:03:7F:2A:7D:1A:D3:CF:D3:92:66:5E:D2:3E:4E:F9:C2:A0
            X509v3 Authority Key Identifier:
                keyid:EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:81:f3:18:5e:ab:73:75:83:0d:4f:b6:8d:ed:f8:8d:60:5e:
         d9:d8:b9:31:ff:35:e5:f0:35:b9:57:4c:0b:07:54:05:90:51:
         f5:91:cf:65:85:b9:e2:57:8e:af:e9:10:73:25:d1:28:c9:37:
         06:5f:35:24:97:02:77:72:7d:27:4a:7f:5e:48:f2:89:d5:78:
         21:59:c0:23:d8:ed:e5:2e:49:f2:65:8c:21:ee:54:b8:2a:08:
         b3:6f:d4:15:8a:1e:81:9f:34:35:6b:b3:c1:c3:9a:75:aa:cb:
         b2:d3:42:84:ce:55:ea:d1:40:c6:68:9d:ee:a9:47:e5:d6:e7:
         6c:0c:df:b2:c2:54:a8:2e:1e:f2:18:af:b2:fb:d7:83:c3:47:
         d8:44:7c:25:e7:26:2a:d0:d9:af:c4:48:fb:19:ac:3a:5f:35:
         7c:6b:5e:1a:37:94:99:36:2b:4e:47:0f:26:ad:5f:60:48:d6:
         78:2f:2a:b8:6d:39:34:7e:5d:8f:95:ee:6f:02:9c:7c:90:e0:
         25:b8:68:1b:f3:db:3e:b2:0f:30:bf:15:87:f4:6a:23:14:af:
         35:65:08:6c:81:f1:8e:2b:41:45:88:0a:45:11:16:1c:d1:9a:
         79:d7:82:eb:e8:cf:b3:dc:b6:8c:19:5c:94:5f:ea:78:8a:1f:
         f4:15:49:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:09:50 2024 by rpki-client on console-ams.rpki-client.org